FarCry has its own in-built, roles based security model that is leveraged by the framework, and custom applications.

As of FarCry 5.0, all user directories can be defined outside the core. While the basic FarCry user directory (where users and groups are stored in the application database) is still included in the core, LDAP and Active Directory user directories have been moved to plugins.